webui

.env.example

@@ -11,6 +11,25 @@ FSLOGIX_GROUP_SID=S-1-5-21-1111111111-2222222222-3333333333-513
 # AD_DNS_IP_AUTO=1
 # SAMBA_HOSTNAME=adsambafsrv
 # NETBIOS_NAME=ADSAMBAFSRV
+WEB_ENABLED=true
+WEB_HOSTNAME=files.example.com
+WEB_HTTPS_PORT=443
+WEB_JWT_SECRET=ReplaceWithAtLeast32RandomBytes
+WEB_TLS_MODE=step
+STEP_CA_URL=https://ca.example.com:9000
+STEP_CA_FINGERPRINT=ReplaceWithStepRootFingerprint
+STEP_CA_PROVISIONER=fileserver
+STEP_CA_PROVISIONER_PASSWORD=ReplaceWithProvisionerPassword
+# STEP_CA_TOKEN=single-use-bootstrap-token
+# STEP_CA_PROVISIONER_PASSWORD_FILE=/run/secrets/step-ca-provisioner-password
+# STEP_CA_REBOOTSTRAP=false
+# WEB_TLS_CERT_FILE=/state/tls/web.crt
+# WEB_TLS_KEY_FILE=/state/tls/web.key
+# WEB_JWT_TTL_SECONDS=28800
+# WEB_USAGE_SCAN_INTERVAL_SECONDS=900
+# WEB_DIRECTORY_CACHE_SECONDS=300
+# WEB_MAX_GROUP_NODES=10000
+# WEB_LOGIN_ATTEMPTS_PER_5_MIN=10
 # LDAP_URI=ldaps://example.com
 # LDAP_BASE_DN=DC=example,DC=com
 # PRIVATE_SKIP_USERS=svc_backup,svc_sql
@@ -19,7 +38,7 @@ FSLOGIX_GROUP_SID=S-1-5-21-1111111111-2222222222-3333333333-513
 # BACKUP_DESTINATION=smb://DOMAIN%5Cuser:pass@backup.example.com/Backups/samba
 # BACKUP_DESTINATION=davfs://user:pass@webdav.example.com/remote.php/dav/files/backup
 # BACKUP_DESTINATION=sftp://user:pass@sftp.example.com/exports/samba
-# BACKUP_START_HOUR=2
+# BACKUP_START_HOUR=2  # 0-23, UTC
 # BACKUP_RETENTION_DAILY=3
 # BACKUP_RETENTION_WEEKLY=2
 # BACKUP_RETENTION_MONTHLY=2
@@ -27,3 +46,6 @@ FSLOGIX_GROUP_SID=S-1-5-21-1111111111-2222222222-3333333333-513
 # BACKUP_LOG_FILE=/var/log/backup.log
 # BACKUP_PROGRESS=auto
 # BACKUP_PROGRESS_INTERVAL_SECONDS=10
+# BACKUP_STATUS_FILE=/state/backup-status.json
+# AUDIT_COMPRESS_AFTER_HOURS=24
+# AUDIT_QUERY_MAX_DAYS=31